From f1abd76c67ad9a6b28881fab3fccdea12930791e Mon Sep 17 00:00:00 2001
From: Antoine Pitrou <pitrou@free.fr>
Date: Wed, 6 Mar 2002 23:10:35 +0000
Subject: [PATCH] =?UTF-8?q?Vous=20avez=20d=C3=A9j=C3=A0=20vu=20un=20trou?=
=?UTF-8?q?=20de=20s=C3=A9curit=C3=A9=20aussi=20gros=20=3F=20On=20pourrait?=
=?UTF-8?q?=20certainement=20effacer=20le=20inc=5Fconnect,=20et=20autres?=
=?UTF-8?q?=20joyeuset=C3=A9s.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
spip_image.php3 | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/spip_image.php3 b/spip_image.php3
index 276438eb54..ae3a235c31 100644
--- a/spip_image.php3
+++ b/spip_image.php3
@@ -51,7 +51,6 @@ function ajout_image($source, $dest) {
// Securite
if (!verifier_action_auteur("ajout_image $dest", $hash, $hash_id_auteur)) {
- @unlink($source);
exit;
}
@@ -103,8 +102,8 @@ function ajout_doc($orig, $source, $dest, $mode, $id_document) {
$result = mysql_query($query);
if ($row = @mysql_fetch_array($result)) {
$id_type = $row['id_type'];
- } else
- return;
+ }
+ else return;
//
// Preparation
--
GitLab